Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/KnE4Mj7OvP5zgOX4YSH7W-O44H0.roa
File: KnE4Mj7OvP5zgOX4YSH7W-O44H0.roa (raw, json)
Hash identifier: YBGvr+PSngkRWgkkqqyzh3IXhrZ333RCEjksK1ApGI4=
Subject key identifier: 2A:71:38:32:3E:CE:BC:FE:73:80:E5:F8:61:21:FB:5B:E3:B8:E0:7D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0195D6F27C0BB3B9CE5DC51584F2D3C6A6A1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/KnE4Mj7OvP5zgOX4YSH7W-O44H0.roa
Signing time: Thu 27 Mar 2025 09:32:50 +0000
ROA not before: Thu 27 Mar 2025 09:32:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137897
IP address blocks: 185.246.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d6:f2:7c:0b:b3:b9:ce:5d:c5:15:84:f2:d3:c6:a6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 27 09:32:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a7138323ecebcfe7380e5f86121fb5be3b8e07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:98:fb:c7:dd:07:cb:85:ec:8a:bd:aa:63:
64:7c:cd:6b:37:79:1c:6e:a6:bf:f8:97:2f:ca:d2:
5d:31:0f:a0:be:b2:7f:2d:67:44:9b:c2:96:3e:c5:
f8:03:5a:e6:09:62:78:19:6f:a7:a1:07:96:21:27:
25:a1:51:85:c5:e2:cf:7c:20:dc:c3:67:6e:c9:63:
cc:e1:58:72:d2:ce:ce:5f:b8:a4:f4:ce:50:58:91:
a8:00:7c:80:6d:ab:5f:a8:82:1f:92:38:c2:9a:91:
96:28:b0:ea:5b:7c:54:f1:4a:f0:c9:de:d1:ce:c6:
cb:93:16:89:04:76:56:d8:f5:06:3b:81:5f:6e:d4:
c2:f1:5d:53:92:b2:a2:84:dc:65:07:2f:6d:4e:1d:
f9:b0:69:ce:e9:e9:b7:0e:35:1f:00:3e:c8:96:0f:
9e:94:41:1b:1f:69:cc:b3:bd:d1:0f:90:5d:55:a9:
7d:9a:6a:69:23:74:95:22:f4:95:5e:57:51:07:d9:
6a:f2:49:d9:fa:8f:5f:aa:11:db:10:aa:f3:2b:7d:
a2:8c:9b:af:f6:1d:72:99:0c:e1:c1:1a:a5:82:e2:
fd:ae:73:92:b9:e6:70:02:a3:88:cc:e7:ba:ad:42:
dc:cf:a4:e7:60:a7:5d:1a:1c:26:71:57:f1:4f:47:
c0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:71:38:32:3E:CE:BC:FE:73:80:E5:F8:61:21:FB:5B:E3:B8:E0:7D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/KnE4Mj7OvP5zgOX4YSH7W-O44H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.112.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d2:e9:20:52:59:2e:c4:a8:21:94:1c:f2:a2:2d:66:5f:97:
85:c7:f5:ae:10:23:d2:9b:b7:a2:2c:dd:35:84:47:40:06:d7:
59:b1:a4:9d:1c:17:99:61:5c:a7:be:69:3e:3d:73:17:44:18:
f8:2b:82:3f:09:fe:d7:3c:f5:66:f7:62:52:d1:68:9f:21:0c:
e8:78:bf:f7:4a:2c:cf:40:7e:72:02:27:d0:72:fe:50:24:71:
f5:11:b7:24:9a:6a:b8:a6:cf:75:bc:0c:bd:fa:68:40:fc:5e:
da:3e:27:e2:f2:b1:64:1d:80:1e:66:db:16:9f:99:d9:13:01:
4f:41:03:55:52:41:40:84:19:8c:9e:de:c0:e2:7a:82:cd:8a:
50:91:c3:92:ee:94:7b:f5:3f:29:ce:2e:19:d3:8e:2e:d2:5d:
24:cc:83:42:93:a3:64:c7:04:46:82:0f:4b:59:02:62:ca:b0:
b6:8b:7e:c8:fa:2d:91:f3:49:fb:08:01:78:4d:82:41:cf:57:
79:4e:e8:d5:4f:1f:c6:0a:29:34:02:5c:c3:b1:cc:71:5b:04:
5f:a2:90:fa:e3:37:83:5b:bc:7d:e3:e5:f2:9c:a9:07:a8:79:
41:ca:f2:5e:39:df:33:8d:31:36:97:4f:f8:4c:7c:4d:54:d7:
88:70:86:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:17:20 2025 by rpki-client